Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/yFHRD1A51XBcQaAC8I9JHRRM47Q.roa
File: yFHRD1A51XBcQaAC8I9JHRRM47Q.roa (raw, json)
Hash identifier: nV6uwtohMpZt/Flytt/sRkzJwg4e9GDWS9joQ2R0ncE=
Subject key identifier: C8:51:D1:0F:50:39:D5:70:5C:41:A0:02:F0:8F:49:1D:14:4C:E3:B4
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 4DBB4A
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/yFHRD1A51XBcQaAC8I9JHRRM47Q.roa
Signing time: Sat 01 Jan 2022 03:01:17 +0000
ROA not before: Sat 01 Jan 2022 03:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206550
IP address blocks: 185.182.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5094218 (0x4dbb4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Jan 1 03:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c851d10f5039d5705c41a002f08f491d144ce3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:e1:07:cf:c1:6b:96:e3:f8:5c:12:80:2e:
cd:ec:ef:97:b4:66:cd:05:b9:94:40:1f:00:75:ce:
cb:f3:37:7d:db:fb:0f:7f:79:8b:2f:d8:b5:60:3c:
56:6b:89:74:b4:f1:11:a3:20:d0:68:83:23:3c:ff:
cf:cb:b9:b8:fd:e9:f1:55:34:44:8f:9b:f5:38:8a:
ef:32:c1:99:86:5a:8b:2e:3b:44:1a:17:06:bd:a9:
d3:76:53:22:9f:86:c4:7a:80:c0:68:4b:af:4d:d3:
43:fa:47:3a:bf:23:ee:5c:32:17:ec:ca:01:62:08:
85:93:0b:5d:c6:35:e0:0d:1a:fa:d6:25:51:c7:01:
74:e9:c1:f3:32:cc:72:ca:83:9b:1d:a7:90:b5:e3:
04:b9:a7:f1:71:e9:44:0f:a5:8c:f3:bb:1e:e8:23:
27:1d:73:a2:19:c8:d9:e2:05:23:76:d7:45:b2:b9:
06:74:46:de:98:4f:a6:8c:98:39:9e:73:22:fb:2e:
7e:86:a9:ff:73:05:0d:03:29:26:c0:a4:61:63:dd:
76:58:86:b7:16:fe:ec:56:9b:31:fa:33:da:5b:07:
00:ea:18:11:68:63:bd:ac:c3:93:3b:59:c9:8e:3f:
9c:86:97:1a:90:8f:33:22:db:95:4e:78:f4:c9:32:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:D1:0F:50:39:D5:70:5C:41:A0:02:F0:8F:49:1D:14:4C:E3:B4
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/yFHRD1A51XBcQaAC8I9JHRRM47Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.112.0/24
Signature Algorithm: sha256WithRSAEncryption
28:54:41:c7:0a:d8:8e:6c:79:42:3f:8f:62:af:c7:dd:27:ee:
0b:87:e7:f4:aa:42:a0:34:24:24:ae:03:5c:22:e8:ac:44:ca:
1e:d8:e2:25:b9:99:9c:6c:d0:66:a5:c4:a4:43:96:5a:dc:75:
17:3e:cd:5e:b0:22:a6:2a:1a:aa:e0:da:3d:97:38:97:5e:49:
f7:87:91:b4:88:1e:39:a0:e1:6d:01:1b:31:2e:88:f3:44:60:
a3:ae:fb:6a:b4:29:7e:38:44:9f:7f:15:7d:ec:4b:47:2f:66:
ad:1e:30:39:b2:bd:53:1a:1c:1b:5b:b9:06:eb:83:09:1a:8d:
27:85:86:59:ab:b1:f1:c4:43:f3:ff:59:d1:da:c4:1a:53:3a:
05:db:b1:d8:dd:80:9f:41:48:e8:38:6c:5c:7d:f0:61:c2:ba:
6d:41:30:7d:da:6f:84:43:b0:2f:fd:ab:09:56:11:54:c7:9d:
09:03:17:6d:44:40:da:59:f5:47:2a:1f:4a:6a:0f:03:3a:74:
0e:e8:b9:93:51:e1:7c:82:9b:f2:8e:ad:63:20:83:65:3a:41:
64:e4:5a:81:21:9d:e4:a3:c8:6c:b8:9d:d4:35:d3:b2:8a:0f:
a4:21:c1:84:c5:3a:07:c1:fe:70:04:ae:a8:53:09:d7:ff:d7:
16:90:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:43 2023 by rpki-client on console-ams.rpki-client.org